WHAT IS CLAIMED IS: 

1. A computer-implemented method of configuring 
data for access by a user, comprising: 

obtaining a core data set that represents a 

constituent; 
obtaining a role-specific data set that 

represents a role assumed by the 

constituent; 

storing the core and role-specific data sets so 
as to distinguish the core data set from 
the role-specific data set. 

2. The method of claim 1, wherein storing comprises 
storing the core data set and the role-specific data 
set separate from one another. 

3. The method of claim 2, wherein obtaining a role- 
specific data set further comprises obtaining a role- 
specific data set that only contains data that is 
different than the data stored in the core data set. 

4. The method of claim 1, further comprising: 
obtaining a second role-specific data set that 

represents a second role assumed by the 
constituent; and 
storing the core, role-specific and second role- 
specific data sets so as to distinguish the 
data sets from one another. 

5. The method of claim 4, further comprising 
storing the second role-specific data set so as to be 
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separate from said role-specific data set and the 
core data set. 

6. The method of claim 5, wherein obtaining a 
second role-specific data set comprises obtaining a 
second role-specific data set that only contains data 
that is different than the data stored in the role- 
specific and core data sets. 

7. The method of claim 1, wherein obtaining a role- 
specific data set that represents a role further 
comprises obtaining a role-specific data set that 
represents a role selected from the group consisting 
of customer, supplier, user, employee and contact. 

8. The method of claim 1, further comprising 
determining whether the user has access to the role- 
specific data set. 

9. The method of claim 8, wherein determining 
whether the user has access comprises filtering user 
access, based on a characteristic of the user, to a 
plurality of role-specific data sets that include 
said role-specific data set. 

10. The method of claim 9, wherein filtering user 
access comprises filtering user access without 
requiring the user to log-in more than once per 
session of use. 
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11. The method of claim 9, wherein filtering based 
on a characteristic comprises filtering based on the 
identity of the user. 

12. The method of claim 9, wherein filtering based 
on a characteristic comprises filtering based on a 
role assumed by the user. 

13. The method of claim 9, wherein filtering based 
on a characteristic comprises filtering based on at 
least one security rule set by a system 
administrator . 

14. The method of claim 9, wherein filtering base on 
a characteristic comprises filtering based on an 
agency relationship between the user and an 
organization. 

15. The method of claim 1, further comprising 
creating an association between the role-specific 
data set and one or more organizational divisions 
within an enterprise. 

16. The method of claim 15, further comprising 
determining, based at least in part on the 
association, whether the user has access to the role- 
specific data set. 

17. The method of claim 16, wherein determining 
whether the user has access comprises filtering user 
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access, based at least in part on the association, to 
a plurality of role-specific data sets that includes 
said role-specific data set. 

18. The method of claim 17, wherein filtering user 
access comprises filtering user access without 
requiring the user to log-in more than once per 
session of use. 

19. The method of claim 1, wherein obtaining a core 
data set that represents a constituent further 
comprises obtaining a core data set that represents 
an internal organization constituent. 

20. The method of claim 1, wherein obtaining a core 
data set that represents a constituent further 
comprises obtaining a core data set that represents 
an external organization constituent. 

21. The method of claim 1, wherein obtaining a core 
data set that represents a constituent further 
comprises obtaining a core data set that represents a 
constituent that is an individual person. 

22. The method of claim 1, wherein obtaining a core 
data set that represents a constituent further 
comprises obtaining a core data set having any one of 
a plurality of specialized formats. 
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23. The method of claim 1, wherein obtaining a role- 
specific data set that represents a role assumed by 
the constituent comprises obtaining a role-specific 
data set having a format that is customized to the 
role assumed by the constituent. 

24. A computer-implemented method for distributing 
access rights, comprising: 

receiving a set of log-in information; 
identifying, based on the log-in information, a 

contact record; 
identifying an association between an 

organization record and the contact record; 

and 

selectively providing access based at least in 
part on the association. 

25. The method of claim 24, wherein identifying an 
association comprises identifying an employment 
association between an individual affiliated with the 
contact record and an employer affiliated with the 
organization record. 

26. The method of claim 25, wherein selectively 
providing access further comprises providing access 
to the organization record when the association is an 
indication that the individual is employed by the 
employer. 



-45- 

27. The method of claim 26, wherein selectively 
providing access further comprises providing access 
to role-specific records related to the organization 
record when the association is an indication that the 
individual is employed by the employer. 

28. The method of claim 27 , wherein providing access 
to role-specific records comprises selectively 
providing access to role-specific records based at 
least in part on a plurality of access security 
rules . 

29. The method of claim 28, wherein selectively 
providing access to role-specific records based at 
least in part on a plurality of access security rules 
comprises selectively providing access to role- 
specific records based at least in part on a 
plurality of access security rules selectively 
configured by a system administrator. 

30. The method of claim 28, wherein selectively 
providing access to role-specific records based at 
least in part on a plurality of access security rules 
comprises selectively providing access based at least 
in part on a plurality of access security rules that 
distribute access rights based on an identity 
characteristic of the individual. 

31. The method of claim 28, wherein selectively 
providing access to role-specific records based at 
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least in part on a plurality of access security rules 
comprises selectively providing access based at least 
in part on a plurality of access security rules that 
distribute access rights based on a role assumed by 
the individual. 

32. A system for organizing business data for access 
by a user, the system comprising: 

a data management component for receiving data 
and distributing it into a plurality of 
constituent and role-specific records; 

a constituent-role association component for 
maintaining a record of relationships 
between constituent and role-specific 
records; and 

a security subsystem for distributing access 

rights based at least in part on the record 
of relationships. 

33. The system of claim 32, wherein the security 
subsystem is further configured to distribute access 
rights based at least in part on a plurality of 
access security rules. 

34. The system of claim 33, wherein the access 
security rules are selectively established by a 
system administrator. 



35. The system of claim 32, wherein: 
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the record of relationships includes a record of 
employer-employee relationships ; and 
the security subsystem is further configured to 

distribute access rights based at 
least in part on the record of 
employer-employee relationships . 



